RecordDeposit

Record an arrival that reached a rail out of band, PROVEN against the chain.

The caller supplies only a pointer to a fact: the reference is read back from the chain and the amount and the credited party are taken from what is actually there. An operator therefore cannot mint a balance by typing one — the worst a wrong reference can do is name a transfer that does not exist, or one that did not land on an address of ours, and both are rejected.

The chain names the owner of the deposit address the transfer landed on, so the credited party is always a PERSON: party_kind is user and party_id their banking id. A transfer to the treasury address is nobody's until the owners say whose — it is refused here and attributed through SeedCapital.